submitted 1 week ago by melezhik@programming.dev to c/linux@programming.dev

8 comments fedilink hide all child comments

Some times ago I posted about scc tool, here is a short update with some example reports provided. https://dev.to/melezhik/linux-compliance-checks-with-sparrow-plugin-2160

People can use the plugin to check if their Linux configuration files are security compliant

Sparrow is a Raku automation framework

you are viewing a single comment's thread
view the rest of the comments

[-] melezhik@programming.dev 1 points 1 week ago* (last edited 1 week ago)

This seems, at best, some general security checks but not mapped to any framework in particular.

So. Yes. Ssh access should be passwords only, etc. Some common sense. We don’t need standard to that

UPDATE: sorry for the typo, meant passwordless

[-] vk6flab@lemmy.radio 1 points 1 week ago

Ssh access should be passwords only

What are you basing this on?

[-] fartsparkles@lemmy.world 4 points 1 week ago

Definitely not NIST 800-53, PCI-DSS, or ISO 27001; all of which stipulate ssh key management not password-based authentication.

[-] melezhik@programming.dev 1 points 1 week ago

Typo )) sorry , meant password less

this post was submitted on 09 Jul 2026

20 points (91.7% liked)

Linux

14351 readers

632 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago

MODERATORS